a-ten[.]obruchalka[.]kz

The domain a-ten.obruchalka.kz is currently flagged as a high‑risk generic phishing site. Infrastructure analysis shows the domain is hosted on the Hoster.KZ name‑server set (ns1, ns2, ns3.hoster.kz) and resolves to IP 213.130.74.133, which is assigned to AS201993 (Tilda Publishing Kaz LLC) and geolocated in Germany. The domain was registered on 24 March 2009 through HOSTER.KZ and continues to serve HTTP content (status 200) protected by a Let’s Encrypt R13 certificate. The landing page title, observed in the HTTP response, reads “Коллекции колец для свадьбы”, indicating content related to wedding ring collections, but no further page content has been examined. The site has a Gridinsoft trust score of 0/100, has been blocked by PhishDestroy, and appears on one external blocklist. VirusTotal scans report a single vendor detection out of 91, confirming some level of malicious assessment. While the exact phishing vector has not been verified, the combination of high‑risk classification, active status, and external blocklist placement suggests ongoing malicious activity. Defenders should add the domain and its IP address to deny‑list rules, monitor DNS queries for the domain, and consider URL filtering to prevent user access. Additional investigation of the page content and traffic patterns is advised to determine the specific data being targeted.